CODEWITHSUNDEEP
templatescoldfusioncode-injection
Alex
Alex

Reputation: 481

How to prevent Coldfusion from injecting cfform.js into the head section?

An HTML template is passed to Coldfusion. The head tag of the template has additional attribute:

<head profile="http://abc.com">

The issue is that when generating the output based on this template Coldfusion injects its scripts inside the head tag:

<head <script type="text/javascript" src="/CFIDE/scripts/cfform.js"></script>
<script type="text/javascript" src="/CFIDE/scripts/masks.js"></script>
profile="http://abc.com">

This causes profile="http://abc.com"> to appear on the top of the page and prevents page from validation.

The code injection occurs only when there is a form tag. The wrong-place injection does not happen if the head tag does not have any attributes. The presence of the attribute is a project requirement and cannot be omitted.

Is it possible to prevent Coldfusion from injecting the scripts?

Upvotes: 6

Views: 3504

Answers (2)

Jim
Jim

Reputation: 31

My Solution: Put the meta tag right after the 

<html>
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
<head>

when CF creates the page it puts the tag below the but above the tags

<!DOCTYPE html>
<html class=" ext-strict">
<head>
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
<script type="text/javascript">/* <![CDATA[ */_cf_loadingtexthtml="<img alt=' ' src='/CFIDE/scripts/ajax/resources/cf/images/loading.gif'/>";
_cf_contextpath="";
_cf_ajaxscriptsrc="/CFIDE/scripts/ajax";
_cf_jsonprefix='//';
_cf_clientid='9851DA49BD375D9722A9D6B1951976AC';/* ]]> */</script><<script type="text/javascript" src="/CFIDE/scripts/ajax/yui/yahoo-dom-event/yahoo-dom-event.js"></script>

Upvotes: 3

Ben Doom
Ben Doom

Reputation: 7885

The script injection only happens for cfforms, not standard forms. If you aren't using any of cfform's enhancements, you can simply switch to a standard form.

I checked the cumulative hotfix list, and didn't see a fix for this.

Upvotes: 6

Related Questions